Why wasn't there a release to fix CVE-2015-5949?

[pacpac]

I'm using VLC Player 2.2.1. About a month ago I received a security advisory of an arbitrary pointer dereference in VLC player. Though this issue was fixed in the repo over a month ago there hasn't been a VLC Player 2.2.2 released with the fix. Also the issue is not listed on your security page. Why not?

[pacpac]

Does nobody know the answer to this?

[pacpac]

Hello again, hate to be a bother, but can someone answer this? Is this an issue that can be exploited if I open in VLC player a video file I downloaded?

[pacpac]

So it's been over 3 months now, will no one address this?